rocketchat 7.0.2 Helm chart

Name: rocketchat Helm chart 7.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

335 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-6608	stdlib@go1.25.2	1.26.9
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.2	2.0.3
Low	GO-2026-6607	stdlib@go1.25.2	1.26.9
Low	DLA-4061-1	libtasn1-6@4.16.0-2+deb11u1	4.16.0-2+deb11u2
Low	ALPINE-CVE-2026-8286	curl@8.14.1-r2	8.14.1-r4
Low	BIT-mongodb-2024-8305	MongoDB (R)@6.0.10	6.0.17
Low	BIT-mongodb-2024-8305	mongodb@6.0.10-1	6.0.17
Low	GO-2025-4013	stdlib@go1.20.7	1.24.8
Low	GO-2026-6609	stdlib@go1.25.2	1.26.9
Low	BIT-mongodb-2025-10060	MongoDB (R)@6.0.10	6.0.25
Low	BIT-mongodb-2025-10060	mongodb@6.0.10-1	6.0.25
Low	BIT-mongodb-2025-6710	MongoDB (R)@6.0.10	6.0.21
Low	BIT-mongodb-2025-6710	mongodb@6.0.10-1	6.0.21
Low	GHSA-w5hq-g745-h8pq	uuid@8.3.2	11.1.1
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-qrvq-68c2-7grw	github.com/nats-io/nats-server/v2@v2.10.23	2.11.12
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GO-2025-3420	stdlib@go1.20.7	1.22.11
Low	BIT-mongodb-2025-6714	MongoDB (R)@6.0.10	6.0.23
Low	BIT-mongodb-2025-6714	mongodb@6.0.10-1	6.0.23
Low	GO-2025-3956	stdlib@go1.20.7	1.23.12
Low	GO-2026-4946	stdlib@go1.25.2	1.25.9
Low	GO-2025-3595	golang.org/x/net@v0.7.0	0.38.0
Low	GHSA-8r68-gvr4-jh7j	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	ALPINE-CVE-2026-6253	curl@8.14.1-r2	8.14.1-r4
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@2.1.0	2.1.5
Low	GHSA-qhr7-859c-m2p7	brace-expansion@2.1.0	2.1.6
Low	ALPINE-CVE-2026-6276	curl@8.14.1-r2	8.14.1-r4
Low	GHSA-68fv-2mgg-jv7q	source-map-js@1.2.1	1.2.2
Low	GHSA-w4pp-8pjf-rmxw	pacote@19.0.2	21.5.1
Low	GO-2026-6629	golang.org/x/text@v0.29.0	0.41.0
Low	ALPINE-CVE-2026-2673	openssl@3.5.4-r0	3.5.6-r0
Low	GO-2024-2598	stdlib@go1.20.7	1.21.8
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.31.0	0.52.0
Low	GO-2023-2186	stdlib@go1.20.7	1.20.11
Low	GO-2026-6613	stdlib@go1.25.2	1.26.9
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	GO-2025-3849	stdlib@go1.20.7	1.23.12
Low	GHSA-jxxm-27vp-c3m5	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	GO-2026-6605	stdlib@go1.25.2	1.26.9
Low	ALPINE-CVE-2026-3784	curl@8.14.1-r2	8.14.1-r4
Low	DLA-4259-1	systemd@247.3-7+deb11u4	247.3-7+deb11u7
Low	GO-2026-6610	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-6610	stdlib@go1.25.2	1.26.9
Low	ALPINE-CVE-2025-49014	jq@1.8.0-r0	1.8.1-r0
Low	GHSA-2vr4-cq9g-pvrc	ip-address@10.2.0	10.5.1
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.44.0	0.55.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.4-r0	3.5.8-r0
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.11	3.3.18
Low	GHSA-gqvv-2mrq-wpjv	hono@4.12.25	4.13.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.